Maker tech hub — AI · 3D print · Pi · ESP32 · plus the classic tech archive.

Free ESP32 kit · Books · Network Ninja · Archive

Classic tech archive. From the original averyjparker.com tech blog — historical context; pair with modern guides where noted. Full archive · Maker projects · Network Ninja

Classic tip · Security

How to Remove SecurityFighter | Security Fighter Removal

SecurityFighter is making the rounds as yet another rogue security application. It installs itself via trojans and web popups and creates files that it then claims are viral and need to be cleaned ou…

Written by

Avery J. Parker

IT veteran, maker educator, and author of Network Ninja, 3D Printing Mastery, and AI Workflow Mastery. Business IT: Diversified Tech Solutions.

SecurityFighter is making the rounds as yet another rogue security application. It installs itself via trojans and web popups and creates files that it then claims are viral and need to be cleaned out for your computer to be safe. Of course, they never can do that without you first paying for the program. This is the latest version of the WiniSoft malware family and resembles very closely the SaveDefender rogue application (see how to remove savedefender.) So, it's no surprise that the SecurityFIghter Removal is very similar:

Before attempting the removal it would be best to block the following web site related to SecurityFighter:

securityfighter.com

The first thing to try as usual is to try to remove SecurityFighter from the control panel and your add/remove programs dialog. If that doesn't work, then the next step is to download malwarebytes antimwalware from the virus removal toolkit page. Update and run this program. If it is unable to remove files you may either try to reboot into safe mode and rerun the scan or try to kill off the following process in task manager:

bpjoham5.exe
SecurityFighter.exe
uninstall.exe

The following DLL should be deleted and unregistered:

4949tzreat25901.dll

After this you may rerun your malwarebytes antivirus scan or proceed with manually removing the following files and their folders:

%Docs%\All Users\Desktop\SecurityFighter.lnk
%Docs%\All Users\Start Menu\Programs\SecurityFighter
%Docs%\All Users\Start Menu\Programs\SecurityFighter\1 SecurityFighter.lnk
%Docs%\All Users\Start Menu\Programs\SecurityFighter\2 Homepage.lnk
%Docs%\All Users\Start Menu\Programs\SecurityFighter\3 Uninstall.lnk
%ProgFiles%\SecurityFighter Software
%ProgFiles%\SecurityFighter Software\SecurityFighter
%ProgFiles%\SecurityFighter Software\SecurityFighter\SecurityFighter.exe
%ProgFiles%\SecurityFighter Software\SecurityFighter\uninstall.exe
%Windir%\1018595zktool209.ocx
%Windir%\10410zackt9ol3565.bin
%Windir%\10792hacztool5c5.ocx
%Windir%\system32\4710s5ambot1ze9.cpl
%Windir%\system32\48azac9door459.bin
%Windir%\system32\4949tzreat25901.dll
%Tmp%\bpjoham5.exe

It should be noted that some of the filenames above are likely randomized and you should use this as the beginning of your search for patterns that are established with the above files. To continue with your Securityfighter removal you should next run a scan (and update) of malwarebytes antimalware. This is in case there are any leftover files, registry entries or other fun "gifts" from this rogue application.